Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
File: CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft (raw, json)
Hash identifier: 1ji9E/B1JjKu2Roht2wAw+py90ryVtjuG0t0Rq3PDWY=
Subject key identifier: E6:69:11:3C:CB:4A:2B:5D:14:68:31:20:05:02:D7:B0:ED:2D:2A:66
Authority key identifier: 08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
Certificate issuer: /CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Certificate serial: 019A4DE2153204B69F62BC2596450AD724B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
Manifest number: 02FD
Signing time: Tue 04 Nov 2025 08:00:53 +0000
Manifest this update: Tue 04 Nov 2025 08:00:53 +0000
Manifest next update: Wed 05 Nov 2025 08:00:53 +0000
Files and hashes: 1: 3rwXWtFbCIuCgGU96PeqAGUhWU4.roa (hash: rp0bCqxBlPPCcVLUBh0MkWETtPWfiqbHwRVpOhMjnK4=)
2: CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl (hash: h4BhpVRI2PUODVIdFUZdi/XIOYN/A7CYY6Jq6e80TS4=)
3: J_7nGvX3BZw4FXXIO0TsrEmgd2Y.roa (hash: jqcFlSNVRG3Aj3N9s1+X70XYoSNVkY4OIWxwZDb7oHY=)
4: wmuRmPBv_IlkfBBV-hF7o6UUILQ.roa (hash: hs6pyaykF/zQtIhils9uIo2Funb7iBy2l/PAgFXmXMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:15:32:04:b6:9f:62:bc:25:96:45:0a:d7:24:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082100f0b1991d80a46421d9fe5147f2d55ac930
Validity
Not Before: Nov 4 08:00:53 2025 GMT
Not After : Nov 5 08:00:53 2025 GMT
Subject: CN=e669113ccb4a2b5d146831200502d7b0ed2d2a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:63:04:31:bc:ab:30:a2:7d:2d:8a:b9:2a:
f6:ce:92:cf:53:6a:fc:34:04:fe:ce:ec:0e:3e:a4:
27:e4:da:25:a5:09:3b:c4:b5:d4:ee:c7:d8:6e:18:
1c:2b:3e:a2:c8:96:b5:af:d7:dc:fe:19:14:d3:f2:
52:be:8b:13:39:53:34:3f:45:9b:33:43:8a:8e:9a:
85:af:61:9b:4d:e7:5f:b3:f9:f8:94:a2:76:b7:e4:
9a:f0:02:6d:e7:7d:c3:90:df:a1:a6:4d:4f:7b:ef:
0f:5b:61:10:e6:39:57:87:1b:5f:f1:9e:0c:9c:2f:
5f:0f:78:13:2a:ec:48:da:d4:24:3e:d2:79:76:66:
73:ec:db:c5:0a:e9:c0:5c:36:c1:71:e8:64:05:32:
ba:d1:3a:38:06:4d:82:6b:d6:ca:4c:99:8a:32:dc:
ce:1a:69:2f:15:fa:12:a4:68:2e:8a:b6:3a:7a:91:
9c:48:35:08:fa:19:ae:b6:7a:58:e1:44:a2:78:b8:
77:a7:bf:f9:70:64:3e:f2:c6:7a:3d:97:6b:3c:1b:
a1:fb:7d:b2:10:5f:06:b9:ec:65:48:b6:e7:ba:ff:
3a:f0:e0:50:4a:0f:ff:b4:96:84:15:1a:04:88:1a:
e6:58:b6:fc:1c:ba:e4:93:91:cc:00:1a:b4:77:24:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:69:11:3C:CB:4A:2B:5D:14:68:31:20:05:02:D7:B0:ED:2D:2A:66
X509v3 Authority Key Identifier:
keyid:08:21:00:F0:B1:99:1D:80:A4:64:21:D9:FE:51:47:F2:D5:5A:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCEA8LGZHYCkZCHZ_lFH8tVayTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/46cf2c-5bea-4861-8e5d-40989d0dfc5c/1/CCEA8LGZHYCkZCHZ_lFH8tVayTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6e:be:81:b1:3c:85:4b:5e:10:2f:f6:60:48:b7:dc:2f:23:
35:55:0f:18:81:40:67:2e:6f:86:f9:90:86:b8:60:c4:ff:cd:
f7:7f:64:d8:c8:8f:54:9f:9b:2f:54:1a:cd:0e:28:9b:45:1d:
86:24:80:73:3a:c8:ab:b2:51:5a:06:01:47:d4:86:da:30:d6:
0e:29:e7:9d:42:36:be:15:4a:78:7c:e0:df:5c:2a:6e:b6:7a:
41:a6:ce:76:cd:12:cf:78:0b:cf:9f:07:c5:21:88:f9:18:9e:
65:58:7e:69:91:14:a8:14:e7:10:61:56:dd:82:9c:ef:76:c8:
a9:c4:03:93:6f:a3:c4:cb:ef:04:0a:a6:76:05:cc:c7:51:0d:
9e:c6:0b:44:93:f1:f6:52:b4:f7:a6:d1:ab:6b:bf:7a:ca:01:
7f:4a:65:89:d7:85:b3:a3:50:5f:d6:28:5b:33:7e:0a:6d:59:
cd:8b:df:85:b5:c0:f8:fe:80:6a:f0:e1:8c:b8:89:14:ff:b6:
8e:10:0e:c3:b8:aa:77:b7:1c:51:9c:30:0f:eb:b6:b8:de:3b:
f3:0a:a9:e1:ec:45:19:f4:50:be:44:88:5b:74:a9:95:83:2b:
44:61:86:2e:8d:3c:9a:7e:bb:b6:65:9c:40:99:b5:52:1e:53:
8e:59:fe:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4hUyBLafYrwllkUK1yS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MjEwMGYwYjE5OTFkODBhNDY0MjFkOWZlNTE0N2YyZDU1
YWM5MzAwHhcNMjUxMTA0MDgwMDUzWhcNMjUxMTA1MDgwMDUzWjAzMTEwLwYDVQQD
EyhlNjY5MTEzY2NiNGEyYjVkMTQ2ODMxMjAwNTAyZDdiMGVkMmQyYTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM9jBDG8qzCifS2KuSr2zpLPU2r8
NAT+zuwOPqQn5NolpQk7xLXU7sfYbhgcKz6iyJa1r9fc/hkU0/JSvosTOVM0P0Wb
M0OKjpqFr2GbTedfs/n4lKJ2t+Sa8AJt533DkN+hpk1Pe+8PW2EQ5jlXhxtf8Z4M
nC9fD3gTKuxI2tQkPtJ5dmZz7NvFCunAXDbBcehkBTK60To4Bk2Ca9bKTJmKMtzO
GmkvFfoSpGguirY6epGcSDUI+hmutnpY4USieLh3p7/5cGQ+8sZ6PZdrPBuh+32y
EF8GuexlSLbnuv868OBQSg//tJaEFRoEiBrmWLb8HLrkk5HMABq0dyTM3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZpETzLSitdFGgxIAUC17DtLSpmMB8GA1UdIwQY
MBaAFAghAPCxmR2ApGQh2f5RR/LVWskwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQt
NDA5ODlkMGRmYzVjLzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80NmNmMmMtNWJlYS00ODYxLThlNWQtNDA5ODlkMGRmYzVj
LzEvQ0NFQThMR1pIWUNrWkNIWl9sRkg4dFZheVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHm6+gbE8
hUteEC/2YEi33C8jNVUPGIFAZy5vhvmQhrhgxP/N939k2MiPVJ+bL1QazQ4om0Ud
hiSAczrIq7JRWgYBR9SG2jDWDinnnUI2vhVKeHzg31wqbrZ6QabOds0Sz3gLz58H
xSGI+RieZVh+aZEUqBTnEGFW3YKc73bIqcQDk2+jxMvvBAqmdgXMx1ENnsYLRJPx
9lK096bRq2u/esoBf0plideFs6NQX9YoWzN+Cm1ZzYvfhbXA+P6AavDhjLiJFP+2
jhAOw7iqd7ccUZwwD+u2uN478wqp4exFGfRQvkSIW3SplYMrRGGGLo08mn67tmWc
QJm1Uh5Tjln+Gg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:18 2025 by rpki-client